Under what legal jurisdiction(s) does IT Security operate, and what are the compliance issues?

This is mainly a response to Stackexchange site on Reverse Engineering but it caused me to think about other potential legal issues.

For example. If posting specific vulnerability information for software X is against the law in country Y, does IT security have any legal compliance issues?


As far as I'm aware, everything for StackExchange operates from New York, NY, USA. Other than my best guess, that's a question that their legal rep would need to chime in on.


Very interesting question - I'd be tempted to say that you'd end up with joint liability in many cases so the individual who posted, and SE may be liable for legal infractions.

but I am not a lawyer - I am interested in any input from those who are...


I feel that a legal.SE site might be needed some time in the future, that would be kind of handy anyways =p

However, I did do some reading.. this would be great in concept, but there is a difference between a novice programmer giving you some bad advice that just messes up a program, and a novice "lawyer" giving you "legal advice" that lands you in jail

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .